In this guide, we’ll show you how to set up SCIM in Nulab Pass and OneLogin to allow for user provisioning.

Prerequisites

• User provisioning by SCIM (available with Nulab Pass)
• Configured SAML 
  • How to set up SAML authentication in Nulab Pass

Supported features

Nulab Pass supports the following user provisioning features:

• Create Managed Accounts
• Update Managed Account attributes
• Deactivate Managed Accounts
• Delete Managed Accounts

Setup in Nulab Pass

Configure the following settings in OneLogin and Nulab Pass.

Setup in Nulab Pass

1. Go to your organization settings.
2. Select Organization > User provisioning to open the SCIM configuration screen.

1. If user provisioning is not enabled:
   1. Select the “Manage” button. 
   2. Select the “Enable” checkbox.
   3. Select “Save.”
   4. Record the SCIM URL somewhere safe.
2. If no token has been issued:
   1. Select the  “Generate token” link to issue a token.
   2. Record your SCIM token somewhere safe.

 

Setup in OneLogin

1. Access the OneLogin management console.
2. select “Administration” at the top-right corner.
   
3. Select Applications > Applications on the top tab.
4. Select “Add App.”

5. Search for ans select “Nulab Pass.”

6. Enter the “Display Name” and save.

7. Open the “Configuration” of the created application.

8. Enter the following, select “Enable,” and then select “Save.”
   1. Space key: Nulab Pass organization space key
   2. Service: Nulab Pass
   3. SCIM bearer token:  SCIM token issued by Nulab Pass
   4. SCIM base URL: SCIM URL issued by Nulab Pass

9. In the menu on the left, select “Provisioning” of the created application. Select the “Enable provisioning” checkbox and then “Save.”

10. In the menu on the left, select “Parameters” of the created application. Review and update what will be synchronized with user provisioning.

Operation with user provisioning

Create a Managed Account

To add a Managed Account with user provisioning to Nulab Pass, grant application access rights to the user in OneLogin.

 

1. Select Users > Users at the top to display the user list screen and select any user.

2. Select “Applications” in the left menu and then the “+” icon.

3. Select the application and then “Continue.”

4. Enter and save attributes.
   1. The information entered at the time of granting access rights becomes the account information to be managed by Nulab Pass.

5. Select “Pending” on the application to synchronize users.

6. When “Provisioned” is displayed, the creation of the Managed Account is complete.

Update Managed Accounts

To update Managed Accounts with user provisioning, update the access information for the user's application in OneLogin.

 

1. Select Users > Users at the top to display the user list screen and select any user.

2. Select “Applications” in the left menu and then the application displayed.
3. Update the attributes and select “Save.”

4. Select “Pending” on the application to synchronize users.

5. When “Provisioned” is displayed, updating of the managed account is complete.

 

Disable or delete Managed Accounts

To disable or delete a Managed Account in user provisioning, set the following to either “Suspend” or “Delete” in the application's “Provisioning.”

This allows you to specify what happens to the Managed Account when you perform the following three operations in OneLogin.

• Delete a user's application access rights
• Suspend a user
• Delete a user

Delete a user's application access rights

1. Select any user.
2. Select “Application” in the left menu.
3. Select the application to open the edit dialog.
4. Select “Delete.”

Suspend a user

1. Select any user.
2. Toggle the “Active” button off.
3. Select “Save user.”

Delete a user

1. Select any user.
2. Select More Actions > Delete.